Access violation when drawing scaled images with certain dimensions

When drawing certain QImages on a scaled painter with certain dimensions, an access violation occurs in qt_scale_image_32bit().

The problem can be reproduced using the following test program using Qt 4.5.3 and Qt 4.6.2 on windows (32bit and 64bit). Under Linux, no access violation occurrs, but valgrind displays read errors in the same location the access violation occurs under windows (see the end of the case for the valgrind output).

It runs without an error by modifying some of the parameters slightly (e.g. using a height of 661 pixels instead of 662 for the source image).

#include <QPainter>

int main(int argc, char *argv[])
{
	QImage srcImage( QSize( 923, 662 ), QImage::Format_RGB32 );
	srcImage.fill(0);
	QImage destImage( QSize( 71, 71 ), QImage::Format_RGB32 );
	destImage.fill(0);
	QPainter p( &destImage );
	const double scale = 0.076923076923076927;
	p.scale( scale, scale );
	const QPointF offset( 0, 111.5 );
	p.translate( offset );
	p.drawImage( 0, 0, srcImage );
}

==28594== Invalid read of size 4
==28594== at 0x42EC7F5: void qt_scale_image_32bit<Blend_RGB32_on_RGB32_NoAlpha>(unsigned char*, int, unsigned char const*, int, QRectF const&, QRectF const&, QRect const&, Blend_RGB32_on_RGB32_NoAlpha) (in /home/mdo/devel/repo sitory/source/cpp/External/Qt/4.5.3/linux/gcc34/lib/libQtGui.so.4)
==28594== by 0x42EB45D: qt_scale_image_rgb32_on_rgb32(unsigned char*, int, unsigned char const*, int, QRectF const&, QRectF const&, QRect const&, int) (in /home/mdo/devel/repository/source/cpp/External/Qt/4.5.3/linux/gcc34/lib /libQtGui.so.4)
==28594== by 0x43983D6: QRasterPaintEngine::drawImage(QRectF const&, QImage const&, QRectF const&, QFlags<Qt::ImageConversionFlag>) (in /home/mdo/devel/repository/source/cpp/External/Qt/4.5.3/linux/gcc34/lib/libQtGui.so.4)
==28594== by 0x43950A1: QRasterPaintEngine::drawImage(QPointF const&, QImage const&) (in /home/mdo/devel/repository/source/cpp/External/Qt/4.5.3/linux/gcc34/lib/libQtGui.so.4)
==28594== by 0x432226B: QPainter::drawImage(QPointF const&, QImage const&) (in /home/mdo/devel/repository/source/cpp/External/Qt/4.5.3/linux/gcc34/lib/libQtGui.so.4)
==28594== by 0x8048CBA: QPainter::drawImage(int, int, QImage const&, int, int, int, int, QFlags<Qt::ImageConversionFlag>) (qpainter.h:887)
==28594== by 0x8048BA0: main (main.cpp:12)
==28594== Address 0x70ec728 is not stack'd, malloc'd or (recently) free'd
==28594==
==28594== ERROR SUMMARY: 3 errors from 1 contexts (suppressed: 75 from 2)